Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/lLJ_L0PK663lLmvADNe5r45-IEc.roa
File: lLJ_L0PK663lLmvADNe5r45-IEc.roa (raw, json)
Hash identifier: pgD1dJtWRe5QdMC1LCOfOn4pTfP1hV/KV545PRL6HI4=
Subject key identifier: 94:B2:7F:2F:43:CA:EB:AD:E5:2E:6B:C0:0C:D7:B9:AF:8E:7E:20:47
Certificate issuer: /CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Certificate serial: 01942521ED9F0A3925D9859B710B9830B668
Authority key identifier: 1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/lLJ_L0PK663lLmvADNe5r45-IEc.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15410
IP address blocks: 62.80.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ed:9f:0a:39:25:d9:85:9b:71:0b:98:30:b6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ed3d8e29e063b9d2740ab3de6c72255ec8d0557
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=94b27f2f43caebade52e6bc00cd7b9af8e7e2047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:7a:b8:ff:8a:8c:cb:54:36:43:5d:f7:e9:
c9:21:a8:44:3b:4a:08:a2:6d:b4:f0:5a:01:4a:ac:
6c:22:0b:04:aa:c2:f3:92:d5:85:f1:c4:af:0d:d5:
5b:54:9a:f5:fa:f8:0b:3c:25:32:e2:5c:c2:87:ea:
98:0e:f7:36:bf:de:61:a7:60:1f:bf:7e:8c:07:43:
84:eb:4c:4e:6e:a3:f3:93:28:69:bc:54:b2:25:17:
df:2e:e5:c2:61:b1:ce:4c:48:33:56:0e:3d:8f:8f:
5f:a1:18:10:a5:71:77:4a:f6:86:68:89:8b:9a:ef:
64:44:86:d4:88:97:88:51:ba:52:4f:39:5f:f4:71:
62:24:e8:66:04:30:c2:32:03:d4:30:63:56:5e:6a:
f4:53:5d:97:78:87:79:e6:08:df:f6:d4:4c:a5:c3:
0f:3b:4b:32:bf:2d:3f:96:e9:5c:81:1c:4f:4e:1c:
ad:64:74:74:02:0d:33:24:79:67:eb:4c:c5:44:c3:
d8:11:a3:b0:2f:19:c3:e6:79:5c:78:cc:03:6b:9b:
43:42:67:1f:3f:5f:12:c2:8e:0d:91:a7:2b:f7:ce:
a2:8d:ba:63:83:6c:4d:87:11:04:cd:77:5e:4f:58:
0b:79:56:46:38:db:ee:93:84:1c:ee:42:6d:cb:1e:
82:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B2:7F:2F:43:CA:EB:AD:E5:2E:6B:C0:0C:D7:B9:AF:8E:7E:20:47
X509v3 Authority Key Identifier:
keyid:1E:D3:D8:E2:9E:06:3B:9D:27:40:AB:3D:E6:C7:22:55:EC:8D:05:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HtPY4p4GO50nQKs95sciVeyNBVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/lLJ_L0PK663lLmvADNe5r45-IEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/4d9c83-f960-48ac-bbf5-9dca5cc80dd9/1/HtPY4p4GO50nQKs95sciVeyNBVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.80.64.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:d8:9c:09:7a:a4:92:14:9c:21:2d:8a:c6:9e:f2:18:4a:24:
59:7d:1f:37:26:8f:82:dc:05:fb:01:a9:e1:cf:62:21:4e:29:
32:11:7a:cc:00:fa:77:0d:56:5b:3b:61:d1:8b:45:9b:b7:bc:
c4:00:23:58:c0:b4:04:cb:17:9f:3f:b7:cf:24:09:b5:f8:06:
34:e8:c5:62:1f:b4:94:0d:5a:b3:56:28:1e:8d:a2:64:f5:e0:
bc:eb:0b:78:9c:bd:d9:52:57:d2:d5:09:e1:58:6c:61:48:2a:
72:16:23:4f:a7:8b:30:3a:9c:c8:8d:b9:bb:96:b5:2a:30:9f:
33:97:00:ca:50:58:06:c3:30:61:92:56:63:03:81:f1:8c:92:
da:c3:fb:e5:a4:25:87:e3:27:e1:26:37:4b:25:48:3a:bf:a5:
89:38:2b:e8:e7:98:4d:8c:b3:ff:58:43:d3:2e:51:3c:e4:56:
22:57:eb:0d:5b:d3:ad:2f:9f:b3:40:ff:79:11:45:78:74:2f:
65:ab:8d:c6:1b:51:50:75:26:cd:c4:2c:3b:20:73:c2:08:3f:
11:25:56:02:4d:2f:7c:c3:f8:21:6f:99:79:80:78:cb:c7:89:
44:99:db:a9:74:97:5d:5a:22:14:c5:56:59:bc:c2:96:a7:a7:
c2:19:f3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:36:49 2025 by rpki-client